WealthHub

Privacy Policy

Last updated 17 August 2026

This policy explains how [Registered legal entity name] (“we”) collects, uses, shares and protects personal data in WealthHub, our customer relationship management system, used by our staff and by the tenants and landlords we give portal accounts to, as a web application and as the WealthHub Android app.

1. Who we are and who this covers

WealthHub is our own customer relationship management system. It is not sold to other companies — every account is created by us, and there is no public sign-up. We are the data controller for everything held in it.

Personal data in WealthHub belongs to three groups:

  • Our staff — agents and administrators who sign in to do their work.
  • Portal users — tenants and landlords we have given an account, who sign in to a limited area to see their own property, payments, documents and support requests. Portal users see only their own records, never anyone else’s.
  • Our clients and contacts — buyers, sellers and enquiries recorded in the course of our real-estate business, who do not have an account.

If you are in either group and want your data accessed, corrected or deleted, contact us directly using the details in section 11. There is no third party to refer you to.

WealthHub is not intended for children, and we do not knowingly collect data from anyone under 18.

2. What we collect

CategoryExamplesWhy
Account and profileName, work email, phone number, job role and permissions, profile photo, hashed passwordTo create your account, authenticate you and apply role-based access
Client and lead recordsNames, email addresses, phone numbers, nationality and residency status, enquiry history and notesThe core CRM function — managing property enquiries and transactions
Identity and transaction documentsPassports, Emirates IDs, title deeds, Oqood certificates, Form A, leasing forms, tenancy contracts, Ejari and related paperworkTo complete and evidence property transactions, and to meet real-estate regulatory and anti-money-laundering obligations
Property listingsAddresses, property coordinates, prices, photographs, permit numbersTo create listings and publish them to property portals
Employment recordsAttendance and leave records, registered devicesManaging our own staff through the HR features
Technical and usageIP address, browser and device type, web push subscription details, session and login timestampsSecurity, delivering notifications, and keeping the service working
Audit recordsA log of who viewed, changed, approved or deleted a record, and whenAccountability, dispute resolution and regulatory compliance

Property coordinates describe the property being listed. The app does not track the background location of your device.

3. How we use personal data

  • To provide, secure and support the platform.
  • To publish our property listings to the property portals we use, and to receive the enquiries those portals generate.
  • To send operational messages — approval requests, reminders and status changes — by email, push notification and in-app notification.
  • To meet legal obligations, including UAE real-estate and anti-money-laundering record-keeping requirements.

We do not sell personal data, and we do not use client records to serve advertising. The Android app contains no advertising.

4. Who we share it with

We share personal data only with service providers that help us run the platform, and only as far as each needs:

RecipientPurposeData involved
Property Finder, BayutPublishing our listings and receiving the leads they generateListing content and agent contact details
MongoDB AtlasDatabase hostingAll stored records
CloudinaryImage and document storage and deliveryUploaded photos and documents
VercelApplication hosting and analyticsTechnical and usage data
Browser push services (Google, Mozilla, Apple)Delivering web push notifications to your device — determined by the browser you use, not chosen by usPush subscription endpoint and notification content
Email delivery providerSending transactional emailRecipient address and message content

We may also disclose data where required by law, regulation or a valid request from a competent authority, and to establish or defend legal claims.

5. International transfers

We are based in the United Arab Emirates, and some of the providers above process data outside the UAE. Where personal data is transferred across borders, we rely on the safeguards required by applicable law, including contractual protections with each provider.

6. How long we keep it

Staff account data is kept for as long as the account is active, and for any period required by UAE employment law afterwards. Client records and transaction documents are retained for as long as we need them for the transaction and for any period required by UAE real-estate and anti-money-laundering law, which can extend several years beyond the end of a transaction. Audit records are retained for the life of the system. When a retention period ends, data is deleted or anonymised.

7. Security

Data is encrypted in transit using HTTPS. Passwords are stored hashed, never in plain text. Access is controlled by role-based permissions so users see only the records their role allows, and sensitive actions are written to an audit log. Optional biometric and passkey sign-in is supported on devices that offer it. No system is perfectly secure, but we work to protect data proportionately to its sensitivity.

8. Your rights

Subject to applicable law — including the UAE Personal Data Protection Law, and the GDPR where it applies — you may request access to your personal data, correction of inaccurate data, deletion, restriction of or objection to processing, and a portable copy. You may also withdraw consent where processing relies on it.

To exercise any of these, email support@ushre.ae. We respond within the period required by applicable law. Some data we must keep regardless — anti-money-laundering and real-estate records have retention periods set by law, and a deletion request cannot override them. Where that applies we will tell you which data is affected and why.

9. Deleting your account

To request deletion of your WealthHub user account and its associated personal data, email support@ushre.ae from your registered address. Note that records created in the course of your work — client files, transactions and audit entries — are company business records rather than personal data about you, and are retained under the rules above even after your account is closed.

10. Changes to this policy

We may update this policy as the platform changes. The date at the top shows the current version, and material changes will be communicated through the application.

11. Contact us

[Registered legal entity name]
[Registered address, Dubai, United Arab Emirates]
support@ushre.ae

© 2026 [Registered legal entity name]